US20100066565A1 - System for Scheduling Tasks to Control the Execution of Warning Procedures on an Aircraft - Google Patents
System for Scheduling Tasks to Control the Execution of Warning Procedures on an Aircraft Download PDFInfo
- Publication number
- US20100066565A1 US20100066565A1 US12/553,289 US55328909A US2010066565A1 US 20100066565 A1 US20100066565 A1 US 20100066565A1 US 55328909 A US55328909 A US 55328909A US 2010066565 A1 US2010066565 A1 US 2010066565A1
- Authority
- US
- United States
- Prior art keywords
- aircraft
- warning
- onboard
- tasks
- procedure
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Images
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F8/00—Arrangements for software engineering
- G06F8/30—Creation or generation of source code
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F9/00—Arrangements for program control, e.g. control units
- G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
- G06F9/46—Multiprogramming arrangements
- G06F9/48—Program initiating; Program switching, e.g. by interrupt
- G06F9/4806—Task transfer initiation or dispatching
- G06F9/4843—Task transfer initiation or dispatching by program, e.g. task dispatcher, supervisor, operating system
- G06F9/4881—Scheduling strategies for dispatcher, e.g. round robin, multi-level priority queues
Definitions
- the present invention belongs to the field of onboard flight management systems on aircraft. More specifically, it applies to the onboard warning management system which monitors the communication to the crew of warnings issued by a subsystem that has detected a failure or a risk and lists the procedures to be applied by said crew in response to said warnings.
- a centralized flight warning system represents an advance compared to warning reports by subsystem that did not provide the crew with an overview in the event of the concomitant occurrence of a number of warnings.
- the development and maintenance of such systems are complex and costly because they depend not only on the technical specifications of the aircraft equipment but even more on the operational procedures of the airlines. It is therefore important to be able to easily modify the configuration of a warning management system on the one hand, for one and the same airplane model, according to the order from the airline that operates it, and on the other hand, for one and the same airline, over time, according to the changing regulations and feedback from the users.
- the general idea behind the invention is to structure the software that implements the FWS functions in the manner of a task sequencer that has a common system core for one and the same airplane model and of which different modules can easily be replaced to be adapted to an airline's configuration.
- the invention discloses a system for managing warnings onboard an aircraft comprising an airplane data acquisition module, a failure detection module, a warning module signaling said failures and a user interface module, said system further comprising a module for scheduling tasks to be executed for at least one warning and at least one procedure to be executed for said warning, said scheduling being parameterizable using a configuration table that can be modified by an operation maintenance procedure.
- the configuration table comprises at least, for each of the tasks, the indication of the warning and of the procedure that define it and at least one parameter for scheduling said task.
- one of the parameters for scheduling a task is an order of display priority on the user interface module.
- each task has an associated status variable, said variable being loggable in a parameterizable way.
- the warning management system also comprises a module for converting XML files to generate the configuration table.
- the invention also relates to a method of managing warnings onboard an aircraft comprising an airplane data acquisition step, a failure detection step, a step of warning about said failures and a user interface step, said method further comprising a step for scheduling tasks to be executed for at least one warning and at least one procedure to be executed for said warning, said scheduling being parameterizable using a configuration table that can be modified by an operation maintenance procedure.
- the scheduling step comprises a first substep for defining the order of priority of execution of the tasks and a second substep for modifying the status of the tasks based on the outputs from the airplane data acquisition step and the user interface step.
- the invention relates to a method of developing and maintaining the system for managing warnings onboard an aircraft, comprising at least one step for defining a list of tasks to be executed characterized by variables selected from the group (warning, procedure, category, priority, status) and a step for programming in high-level language at least a portion of the runtime logic of said tasks.
- the inventive development and maintenance method further comprises a step for converting the program in high-level language into effective language and a step for loading at least a portion of the output from the conversion step in a configuration table of said system onboard the aircraft.
- the loading step is performed at the time of an aircraft operation maintenance procedure.
- the invention provides the additional advantage that the checks, in particular the crew acknowledgements, that are conventionally programmed in the part of the human/machine interface dedicated to warnings in the systems of the prior art, are, in the inventive system, performed in the sequencer itself which makes it possible to meet the client companies' specifications without modifying the programming of the human/machine interface. Furthermore, the task sequencer can retain in memory the successive states of the different parameters of the system, which makes it possible to improve the traceability of the various actions carried out during a warning. Furthermore, the priority management at task level makes it possible to manage priority conflicts at different levels of the procedures applicable to a number of simultaneously current warnings. Also, the development and maintenance times are greatly reduced by the factorizing of the developments that results from the breakdown into tasks.
- FIG. 1 represents the relationships of a warning management system with the other onboard systems
- FIG. 2 represents the simplified functional architecture of a warning management system according to the invention
- FIG. 3 represents the operating logic at the level of a task according to one embodiment of the invention
- FIG. 4 illustrates the operation of the warning management method onboard an aircraft according to the invention in an exemplary warning scenario.
- FIG. 1 represents the relationships of a warning management system with the other onboard systems.
- the FWS system is implemented redundantly on two computers of the IMA (integrated modular avionics, able to be implemented on a Power PC computer) architecture, in which the consistency of the output is checked at each computation step.
- Each computer FWS/FWA therefore has for input those from the dual computer in the corresponding step and also sends it its own results.
- the FWS receives as input the A/C data (i.e.: the discretes from the onboard computers used to detect the failures of an electronic equipment connected thereto) and the DCA data on n channels (making it possible to correlate the failures with each other).
- A/C data i.e.: the discretes from the onboard computers used to detect the failures of an electronic equipment connected thereto
- DCA data on n channels
- Crew warning, status management and NC warning logics are implemented to process the input data, the processed data being supplied to the FWS generic function core.
- the crew warning logics are dedicated to the triggering of current warnings specific to a given item of equipment.
- the status logic induces a status check list.
- the NC warning logics are identical to the first type of logic, but are generic to a set of computers and not to a single computer.
- the parameters of the current flight phase are also supplied to the FWS core.
- the FWS core is advantageously partitioned into three management functions (crew warnings, states and check list) and four output warning management functions (CAS/CKL zone managing warnings that have been triggered and that induce a check list procedure, INOP SYS managing the warnings that are triggered and filtered and do not induce either a warning or a procedure—only the INOP SYS indicator will be seen by the crew, audio warnings, C/W button warnings).
- the audio warnings are selected from an audio message database provided for this purpose.
- the visual warnings are displayed on the screens provided for this purpose in the cockpit and the flight deck.
- the Arinc 661 and TFTP protocols make it possible to communicate with the CDS (cockpit display system).
- SWAPs severe weather avoidance procedures
- FIG. 2 represents the simplified functional architecture of a warning management system according to the invention.
- a data acquisition module 10 groups together the parameters needed to evaluate the operation of the supervised systems. It can concern intrinsic data (malfunction of an item of electronic equipment or an engine, cabin pressure, altitude, speed, etc.) or extrinsic data (output from the collision avoidance system, output from the weather system, message from the airline, control message, etc.). It is also possible to envisage the data acquisition module acquiring the data modified by the crew in response to a warning and so enabling the execution of a procedure to be validated in closed loop mode.
- a failure detection module 20 analyzes these supervised data to deduce therefrom the detection of failures that are stored in a failure listing. The commands executed by the crew generate an action listing.
- the failures stored in the failure listing trigger where appropriate, a master warning, master caution (MWC) action 30 , generally in the form of a visual signal from the corresponding button, possibly accompanied by an audio message, all under the control of the MWC module's behavior logic.
- MWC master warning, master caution
- the actions to be carried out by the crew are displayed via the human/machine interface (HMI) module 40 in the form of procedures listed in pages.
- HMI human/machine interface
- a standard procedure is to require the crew to acknowledge the consultation of the pages listing the procedures to be carried out in the case of a current warning.
- the actual sequencing is handled by the priority management and task management functions combined in the task scheduling module 50 .
- This scheduling module comprises the software components used to trigger the warnings specific to each failure and provide the users with the associated procedures according to criteria defined in the different versions of the FWS system.
- a task is a warning/procedure pairing which also comprises other attributes.
- the “Task” object is used to handle the scheduling at a more detailed level than that of the procedure, which is the level of scheduling of the FWS systems of the prior art.
- the parameters for scheduling the FWS system warning processing tasks that are specific to given operating conditions of an aircraft are loaded into a configuration table 60 and used by the failure detection module (display style, text of the procedure items, structure of the procedures, links between procedures, unique task identifier). All the static data known a priori are in the configuration table; all the data describing the system's execution dynamics are not described in the configuration table, but are part of a meta-model described in the commentary to FIG. 4 .
- the failure detection module 20 applies the logics used to determine the task identifiers.
- the configuration table can easily be updated in an operator maintenance operation or during a simple stopover, by downloading from a database qualified as DO200.
- the loading is performed simply with no need for program recompilation, the prior parameters being simply overwritten by the new parameters by ground/onboard file exchange by FTP or TFTP protocol during centralized maintenance operations.
- the data to be loaded are generated by an XML module.
- the scheduling module includes a generic data model that is not modified in the various instantiations of an FWS system developed for an aircraft that has a given hardware and software configuration.
- the model is made up of tasks to be carried out by the system according to prescribed behaviors or rules.
- the behaviors or rules are used to process the connections from (failure characteristic data) and to (generation of warnings and application of corresponding procedures) outside the system. These behaviors can change from one version to another. They are stored in the system's configuration table.
- the rules are applied directly to the tasks, on the one hand to implement the management logic for the priorities defined in the system (priority management function), on the other hand to take into account the actions of the user on the data model (task management function).
- the priority management logic can be defined for example at three levels, plus a conflict resolution rule in cases of equal priority, for example the order of arrival.
- the scheduling module or the sequencer of the FWS receives triggers and applies behaviors that are used to process the system tasks. For each type of failure, the “failure detection” module checks whether the failure triggering conditions are fulfilled and updates the failure listing accordingly.
- the “priority management” module activates or deactivates the tasks according to the updates to the failure listing.
- the “interaction command with acquisition” module updates the action listing as soon as the user performs an action on the ECP.
- the “task management” module uses this action listing to change, for example, the internal states of the current task (change page, validate an item, etc.), or to change the current task.
- the sequencer also manages transmittals to the notification/warning system (C/W) and the updates to the user interface (HMI).
- the display of the warning information on the user interface is standardized (ARINC 661 standard). It comprises a control panel for the elements of the CAS (crew alert system) and a control panel for the procedures corresponding to these CAS.
- the tasks can be subdivided into subtasks. To perform multiple-choice procedures, each choice is represented by a subtask having the same priority as the task from which it derives.
- the sequencer displays the tasks to the user in the order in which they must be executed, given the priority levels defined or resulting from the order of arrival.
- a sequencer control process rotates with a determined frequency of the order of 50 ms. The dimensioning of the system depends notably on the power of the computer and the responsiveness of the bus.
- the sequencer control process modifies the internal status of the tasks of the model based on user input and aircraft data.
- FIG. 3 represents the operating logic at the level of a task according to an embodiment of the invention.
- the TaskCategory entity can take different values, for example:
- the TaskState entity can, for example, take the following values:
- the tasks can comprise subtasks that have their own attributes, notably their status and their task dependency link.
- Each task is linked to a warning (CASItem) identified by a message character string.
- the display of CASItem can be parameterized by a style sheet which can be selected with a default format or configured differently.
- the display of the data in the style sheet can be parameterized using an XML file.
- Each task is also linked to a procedure (Procedure) identified by one or more character strings. Since the display of the procedures is paginated, each of the pages that displays a procedure is identified by an index (PageIndex).
- a number of status indicators can also be provided as attributes of a procedure, notably a status variable indicating whether all the items of the procedure have been checked (allitemsChecked) and whether the procedure has been completed (is Completed).
- the checking of the procedure pages and, on each page, of each item can also be followed by status variables.
- each line (Line) can also be identified by a label.
- Each procedure item can be identified by a category to which it belongs (ProcedureItemCategory) which can, for example, take the following values:
- the structuring of the FWS system according to the invention as has just been described makes it possible to organize the developments in such a way as to factorize a large portion of the software code lines.
- the portions that depend only on the hardware configuration of the external modules and on the software configuration common to a type of aircraft without depending on the variable specifications of the aircraft manufacturer, are implemented in the scheduling module.
- the portions that closely depend on the operational conditions of use specific to an operator, such as the assignment of priority levels to tasks, the content of the procedures, the display style sheet and the task and display execution logic, notably, are processed as parameters that are stored in a configuration table.
- These portions can be programmed using a high-level language, such as XML (eXtended Mark-up Language).
- a software development workbench can be used to manage this distribution of the processes and data. Certification can be obtained with an initial configuration. It will not be necessary to recertify the future changes to the FWS system with a modified configuration table, given that it can be proven that modifying the table in no way changes the behavior of the system. Such will be the case if the software development workbench is compatible with the DO200 standard.
- XML files which will be converted by the development workbench into the structure of the configuration table.
- Two different types of XML files are generally used, a first type that describes the style sheet applicable to the data and a second type comprising the description of all the data needed for the processing of the tasks by the sequencer.
- the loading operation can then be carried out in a simple operation maintenance procedure when the aircraft is immobilized at a gate by using the tools provided for this purpose (trivial file transfer protocol, TFTP, or other protocol offering the same procedures for acknowledging downloads to the IMA computer).
- tools provided for this purpose vial file transfer protocol, TFTP, or other protocol offering the same procedures for acknowledging downloads to the IMA computer.
Abstract
Description
- This application claims priority of French application no. FR 0804879, filed Sep. 5, 2008, the disclosure of which is hereby incorporated by reference in its entirety.
- The present invention belongs to the field of onboard flight management systems on aircraft. More specifically, it applies to the onboard warning management system which monitors the communication to the crew of warnings issued by a subsystem that has detected a failure or a risk and lists the procedures to be applied by said crew in response to said warnings.
- A centralized flight warning system (FWS) represents an advance compared to warning reports by subsystem that did not provide the crew with an overview in the event of the concomitant occurrence of a number of warnings. On the other hand, the development and maintenance of such systems are complex and costly because they depend not only on the technical specifications of the aircraft equipment but even more on the operational procedures of the airlines. It is therefore important to be able to easily modify the configuration of a warning management system on the one hand, for one and the same airplane model, according to the order from the airline that operates it, and on the other hand, for one and the same airline, over time, according to the changing regulations and feedback from the users. These conditions are not fulfilled by the warning management systems of the prior art which have the characteristic of being developed, given the certification constraints, as a monolithic sequential code.
- To resolve this problem, the general idea behind the invention is to structure the software that implements the FWS functions in the manner of a task sequencer that has a common system core for one and the same airplane model and of which different modules can easily be replaced to be adapted to an airline's configuration.
- To this end, the invention discloses a system for managing warnings onboard an aircraft comprising an airplane data acquisition module, a failure detection module, a warning module signaling said failures and a user interface module, said system further comprising a module for scheduling tasks to be executed for at least one warning and at least one procedure to be executed for said warning, said scheduling being parameterizable using a configuration table that can be modified by an operation maintenance procedure.
- Advantageously, the configuration table comprises at least, for each of the tasks, the indication of the warning and of the procedure that define it and at least one parameter for scheduling said task.
- Advantageously, one of the parameters for scheduling a task is an order of display priority on the user interface module.
- Advantageously, each task has an associated status variable, said variable being loggable in a parameterizable way.
- Advantageously, the warning management system according to the invention also comprises a module for converting XML files to generate the configuration table.
- The invention also relates to a method of managing warnings onboard an aircraft comprising an airplane data acquisition step, a failure detection step, a step of warning about said failures and a user interface step, said method further comprising a step for scheduling tasks to be executed for at least one warning and at least one procedure to be executed for said warning, said scheduling being parameterizable using a configuration table that can be modified by an operation maintenance procedure.
- Advantageously, the scheduling step comprises a first substep for defining the order of priority of execution of the tasks and a second substep for modifying the status of the tasks based on the outputs from the airplane data acquisition step and the user interface step.
- Furthermore, the invention relates to a method of developing and maintaining the system for managing warnings onboard an aircraft, comprising at least one step for defining a list of tasks to be executed characterized by variables selected from the group (warning, procedure, category, priority, status) and a step for programming in high-level language at least a portion of the runtime logic of said tasks.
- Advantageously, the inventive development and maintenance method further comprises a step for converting the program in high-level language into effective language and a step for loading at least a portion of the output from the conversion step in a configuration table of said system onboard the aircraft.
- Advantageously, the loading step is performed at the time of an aircraft operation maintenance procedure.
- The invention provides the additional advantage that the checks, in particular the crew acknowledgements, that are conventionally programmed in the part of the human/machine interface dedicated to warnings in the systems of the prior art, are, in the inventive system, performed in the sequencer itself which makes it possible to meet the client companies' specifications without modifying the programming of the human/machine interface. Furthermore, the task sequencer can retain in memory the successive states of the different parameters of the system, which makes it possible to improve the traceability of the various actions carried out during a warning. Furthermore, the priority management at task level makes it possible to manage priority conflicts at different levels of the procedures applicable to a number of simultaneously current warnings. Also, the development and maintenance times are greatly reduced by the factorizing of the developments that results from the breakdown into tasks.
- The invention will be better understood, and its various characteristics and benefits will emerge from the following description of a number of exemplary embodiments and its appended figures, in which:
-
FIG. 1 represents the relationships of a warning management system with the other onboard systems; -
FIG. 2 represents the simplified functional architecture of a warning management system according to the invention; -
FIG. 3 represents the operating logic at the level of a task according to one embodiment of the invention; -
FIG. 4 illustrates the operation of the warning management method onboard an aircraft according to the invention in an exemplary warning scenario. - Unless otherwise stated, in the description and the figures, the symbols, acronyms and abbreviations have the meanings indicated in the table below.
-
Symbol/ abbreviation Meaning A/C Aircraft AFDX Avionics Full DupleX switched Ethernet AMS Avionics Management System ARINC Aeronautical Radio, Inc. BITE Built-In Test Equipment C/W Caution and Warning system CAS Crew Alert System CKL Check List CDS Cockpit Display System CMF/CMS Communication Management Function/System CSCI Computer Software Configuration Item DCA Data concentration application DFFWS Definition file of FWS ECAM Electronic Centralized Aircraft Monitor ECP ECAM Control Panel EWD Emergency Warning Display FWA Flight Warning application FWS Flight Warning System HMI/IHM Human Machine Interface IMA Integrated Modular Avionics MWC Master Warning Caution NVM Non Volatile Memory INOP SYS Inoperative system SWAP Severe Weather Avoidance Procedure T2CAS Terrain and Traffic Collision Avoidance System TFTP Trivial File Transfer Protocol WXR Weather Radar system XML eXtensible Mark-up Language -
FIG. 1 represents the relationships of a warning management system with the other onboard systems. - The FWS system is implemented redundantly on two computers of the IMA (integrated modular avionics, able to be implemented on a Power PC computer) architecture, in which the consistency of the output is checked at each computation step. Each computer FWS/FWA therefore has for input those from the dual computer in the corresponding step and also sends it its own results. Furthermore, the FWS receives as input the A/C data (i.e.: the discretes from the onboard computers used to detect the failures of an electronic equipment connected thereto) and the DCA data on n channels (making it possible to correlate the failures with each other). Finally, four systems advantageously send their output to the FWS computer:
-
- the output from the control panel of the centralized Monitor subsystem of the airplane electronics (ECP/ECAM) which return the pilot actions (item acknowledgement, movement in the check list, access to system pages and to procedure lists);
- the states of the notification and warning CAN button at the output of the FWS system;
- the output from the terrain and aircraft avoidance system T2CAS; this system manages the positioning of the aircraft relative to the relief and relative to the trajectories of other detected aircraft and sends warnings to the FWS system in case of a collision trajectory;
- the output from the meteorological radar WXR system; these output are used to trigger warnings on severe bad weather.
- These data are conditioned for use by the FWS system (“input processing” function). Crew warning, status management and NC warning logics are implemented to process the input data, the processed data being supplied to the FWS generic function core. The crew warning logics are dedicated to the triggering of current warnings specific to a given item of equipment. When producing a check list (triggered by the first type of logic), the status logic induces a status check list. The NC warning logics are identical to the first type of logic, but are generic to a set of computers and not to a single computer. The parameters of the current flight phase are also supplied to the FWS core.
- The FWS core is advantageously partitioned into three management functions (crew warnings, states and check list) and four output warning management functions (CAS/CKL zone managing warnings that have been triggered and that induce a check list procedure, INOP SYS managing the warnings that are triggered and filtered and do not induce either a warning or a procedure—only the INOP SYS indicator will be seen by the crew, audio warnings, C/W button warnings). The audio warnings are selected from an audio message database provided for this purpose. The visual warnings are displayed on the screens provided for this purpose in the cockpit and the flight deck. The Arinc 661 and TFTP protocols make it possible to communicate with the CDS (cockpit display system). The CMF protocol makes it possible to send failure data to the centralized maintenance system, to trace all the anomalies detected during the flight; management of severe weather avoidance procedures (SWAPs): a tool to help in implementing procedures specific to North American airspace decreed by the FAA and triggered by air traffic control if there is a need for rerouting, notably in cases of severe storms or cyclones.
-
FIG. 2 represents the simplified functional architecture of a warning management system according to the invention. Adata acquisition module 10 groups together the parameters needed to evaluate the operation of the supervised systems. It can concern intrinsic data (malfunction of an item of electronic equipment or an engine, cabin pressure, altitude, speed, etc.) or extrinsic data (output from the collision avoidance system, output from the weather system, message from the airline, control message, etc.). It is also possible to envisage the data acquisition module acquiring the data modified by the crew in response to a warning and so enabling the execution of a procedure to be validated in closed loop mode. Afailure detection module 20 analyzes these supervised data to deduce therefrom the detection of failures that are stored in a failure listing. The commands executed by the crew generate an action listing. The failures stored in the failure listing trigger, where appropriate, a master warning, master caution (MWC)action 30, generally in the form of a visual signal from the corresponding button, possibly accompanied by an audio message, all under the control of the MWC module's behavior logic. The actions to be carried out by the crew are displayed via the human/machine interface (HMI)module 40 in the form of procedures listed in pages. A standard procedure is to require the crew to acknowledge the consultation of the pages listing the procedures to be carried out in the case of a current warning. The actual sequencing is handled by the priority management and task management functions combined in thetask scheduling module 50. This scheduling module comprises the software components used to trigger the warnings specific to each failure and provide the users with the associated procedures according to criteria defined in the different versions of the FWS system. As detailed hereinbelow, a task is a warning/procedure pairing which also comprises other attributes. The “Task” object is used to handle the scheduling at a more detailed level than that of the procedure, which is the level of scheduling of the FWS systems of the prior art. The parameters for scheduling the FWS system warning processing tasks that are specific to given operating conditions of an aircraft are loaded into a configuration table 60 and used by the failure detection module (display style, text of the procedure items, structure of the procedures, links between procedures, unique task identifier). All the static data known a priori are in the configuration table; all the data describing the system's execution dynamics are not described in the configuration table, but are part of a meta-model described in the commentary toFIG. 4 . From the input data of themodule 10, thefailure detection module 20 applies the logics used to determine the task identifiers. The configuration table can easily be updated in an operator maintenance operation or during a simple stopover, by downloading from a database qualified as DO200. The loading is performed simply with no need for program recompilation, the prior parameters being simply overwritten by the new parameters by ground/onboard file exchange by FTP or TFTP protocol during centralized maintenance operations. The data to be loaded are generated by an XML module. - The scheduling module includes a generic data model that is not modified in the various instantiations of an FWS system developed for an aircraft that has a given hardware and software configuration. The model is made up of tasks to be carried out by the system according to prescribed behaviors or rules. The behaviors or rules are used to process the connections from (failure characteristic data) and to (generation of warnings and application of corresponding procedures) outside the system. These behaviors can change from one version to another. They are stored in the system's configuration table. The rules are applied directly to the tasks, on the one hand to implement the management logic for the priorities defined in the system (priority management function), on the other hand to take into account the actions of the user on the data model (task management function). The priority management logic can be defined for example at three levels, plus a conflict resolution rule in cases of equal priority, for example the order of arrival. The scheduling module or the sequencer of the FWS receives triggers and applies behaviors that are used to process the system tasks. For each type of failure, the “failure detection” module checks whether the failure triggering conditions are fulfilled and updates the failure listing accordingly. The “priority management” module activates or deactivates the tasks according to the updates to the failure listing. The “interaction command with acquisition” module updates the action listing as soon as the user performs an action on the ECP. The “task management” module uses this action listing to change, for example, the internal states of the current task (change page, validate an item, etc.), or to change the current task.
- The sequencer also manages transmittals to the notification/warning system (C/W) and the updates to the user interface (HMI). The display of the warning information on the user interface (EWD or emergency warning display) is standardized (ARINC 661 standard). It comprises a control panel for the elements of the CAS (crew alert system) and a control panel for the procedures corresponding to these CAS.
- The tasks can be subdivided into subtasks. To perform multiple-choice procedures, each choice is represented by a subtask having the same priority as the task from which it derives.
- The sequencer displays the tasks to the user in the order in which they must be executed, given the priority levels defined or resulting from the order of arrival. A sequencer control process rotates with a determined frequency of the order of 50 ms. The dimensioning of the system depends notably on the power of the computer and the responsiveness of the bus. The sequencer control process modifies the internal status of the tasks of the model based on user input and aircraft data.
-
FIG. 3 represents the operating logic at the level of a task according to an embodiment of the invention. - The TaskCategory entity can take different values, for example:
-
- EMERGENCY: Urgent task (linked to a priority failure placing the airplane in danger)
- NORMAL: Normal task (linked to a routine check list corresponding to the pilot actions of a flight phase)
- ABNORMAL: Abnormal task (linked to a non-priority failure not placing the airplane in danger but having to be dealt with)
- STATUS: Status update task (linked to a summary of a completed abnormal task)
- CONSULTATION: Consultation task (any EMERGENCY, NORMAL OR ABNORMAL task, in free consultation mode, that is to say, not triggered by the system)
- The TaskState entity can, for example, take the following values:
-
- CLEARED: Task active but hidden from the user at the request of the user
- ACTIVE: Task active (failure triggered in the system)
- IN PROGRESS: Active task currently executing (presented to the user)
- COMPLETED: Task completed
- CONSULTED: Task consulted
- As already indicated, the tasks can comprise subtasks that have their own attributes, notably their status and their task dependency link.
- Each task is linked to a warning (CASItem) identified by a message character string. The display of CASItem can be parameterized by a style sheet which can be selected with a default format or configured differently. The display of the data in the style sheet can be parameterized using an XML file.
- Each task is also linked to a procedure (Procedure) identified by one or more character strings. Since the display of the procedures is paginated, each of the pages that displays a procedure is identified by an index (PageIndex). A number of status indicators can also be provided as attributes of a procedure, notably a status variable indicating whether all the items of the procedure have been checked (allitemsChecked) and whether the procedure has been completed (is Completed). The checking of the procedure pages and, on each page, of each item, can also be followed by status variables. On each procedure page, each line (Line) can also be identified by a label. Each procedure item can be identified by a category to which it belongs (ProcedureItemCategory) which can, for example, take the following values:
-
- ACTION: Action item that can be validated by the user
- MEMO: Text item
- PROC_COMPLETED: Item indicating that the procedure has been completed
- PREVIOUS PAGE: Action item used to access the previous page
- NEXT PAGE: Action item used to access the next page
- EMPTY: Empty item
- The operation of the method of managing warnings onboard an aircraft is illustrated by the application to a warning case illustrated on the screen shot in
FIG. 4 . This example is by no means limiting on the possible embodiments of the invention: -
- On the left: ELEC SMK represents a warning (Cas Item) that has been detected.
- On the right: the procedure corresponding to the warning on the left is presented to the pilot.
- The first 2 lines represent a memo item (non-interaction information);
- The third and fourth lines represent action items validated by the pilot;
- The framed line represents the current item that can be validated;
- The following lines represent the action items that have not yet been validated;
- The lines with IF represent a multiple choice. The validation of one of these items will lead to the selection of the corresponding subtask.
- The structuring of the FWS system according to the invention as has just been described makes it possible to organize the developments in such a way as to factorize a large portion of the software code lines. The portions that depend only on the hardware configuration of the external modules and on the software configuration common to a type of aircraft without depending on the variable specifications of the aircraft manufacturer, are implemented in the scheduling module. The portions that closely depend on the operational conditions of use specific to an operator, such as the assignment of priority levels to tasks, the content of the procedures, the display style sheet and the task and display execution logic, notably, are processed as parameters that are stored in a configuration table. These portions can be programmed using a high-level language, such as XML (eXtended Mark-up Language). A software development workbench can be used to manage this distribution of the processes and data. Certification can be obtained with an initial configuration. It will not be necessary to recertify the future changes to the FWS system with a modified configuration table, given that it can be proven that modifying the table in no way changes the behavior of the system. Such will be the case if the software development workbench is compatible with the DO200 standard.
- To make a modification to the configuration table, all that is needed is to generate one or more XML files which will be converted by the development workbench into the structure of the configuration table. Two different types of XML files are generally used, a first type that describes the style sheet applicable to the data and a second type comprising the description of all the data needed for the processing of the tasks by the sequencer.
- The loading operation can then be carried out in a simple operation maintenance procedure when the aircraft is immobilized at a gate by using the tools provided for this purpose (trivial file transfer protocol, TFTP, or other protocol offering the same procedures for acknowledging downloads to the IMA computer).
- The examples described hereinabove are given to illustrate embodiments of the invention. They in no way limit the scope of the invention which is defined by the appended claims.
Claims (10)
Priority Applications (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
US14/187,955 US20140359564A1 (en) | 2008-09-05 | 2014-02-24 | System for Scheduling Tasks to Control the Execution of Warning Procedures on an Aircraft |
Applications Claiming Priority (2)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
FR0804879A FR2935818B1 (en) | 2008-09-05 | 2008-09-05 | TASK SCHEDULING SYSTEM FOR CONTROLLING THE EXECUTION OF ALERT PROCEDURES ON AN AIRCRAFT |
FR0804879 | 2008-09-05 |
Related Child Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
US14/187,955 Division US20140359564A1 (en) | 2008-09-05 | 2014-02-24 | System for Scheduling Tasks to Control the Execution of Warning Procedures on an Aircraft |
Publications (2)
Publication Number | Publication Date |
---|---|
US20100066565A1 true US20100066565A1 (en) | 2010-03-18 |
US8659447B2 US8659447B2 (en) | 2014-02-25 |
Family
ID=40886953
Family Applications (2)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
US12/553,289 Active 2031-12-10 US8659447B2 (en) | 2008-09-05 | 2009-09-03 | System for scheduling tasks to control the execution of warning procedures on an aircraft |
US14/187,955 Abandoned US20140359564A1 (en) | 2008-09-05 | 2014-02-24 | System for Scheduling Tasks to Control the Execution of Warning Procedures on an Aircraft |
Family Applications After (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
US14/187,955 Abandoned US20140359564A1 (en) | 2008-09-05 | 2014-02-24 | System for Scheduling Tasks to Control the Execution of Warning Procedures on an Aircraft |
Country Status (2)
Country | Link |
---|---|
US (2) | US8659447B2 (en) |
FR (1) | FR2935818B1 (en) |
Cited By (16)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20100218114A1 (en) * | 2007-08-31 | 2010-08-26 | Thales | Method for Simplifying the Display of Stationary Members of an Onboard Database |
US20110063136A1 (en) * | 2009-09-16 | 2011-03-17 | Airbus Operations (S.A.S.) | Method and device for centralized management of warnings in an aircraft comprising several warning presentation interfaces |
US20110160938A1 (en) * | 2009-12-30 | 2011-06-30 | Thales | Device for centralized management of tasks to be carried out by a crew of an aircraft |
US20110160937A1 (en) * | 2009-12-30 | 2011-06-30 | Thales | Method and device for centralized management of tasks to be carried out by a crew of an aircraft during flight |
US20120316705A1 (en) * | 2011-06-10 | 2012-12-13 | Thales | Optimized task processing method and device for an fws |
US20130214941A1 (en) * | 2012-02-17 | 2013-08-22 | Honeywell International Inc. | Display system and method for generating a display |
US20130282207A1 (en) * | 2012-04-24 | 2013-10-24 | Thales | Fully Parametrizable Electronic Alerts and Procedures Management System, Intended for an Aircraft |
US20160107763A1 (en) * | 2014-10-21 | 2016-04-21 | Airbus Operations S.A.S. | Method and device for assisting the management of procedures, notably of failures of systems of an aircraft |
US10023324B2 (en) * | 2016-04-06 | 2018-07-17 | Honeywell International Inc. | Methods and apparatus for providing real-time flight safety advisory data and analytics |
US20190120968A1 (en) * | 2016-04-05 | 2019-04-25 | Deutsches Zentrum für Luft- und Raumfahrt e.V. | Method and Device for Detecting a Fault of a Barometric Pressure Measuring System Arranged Aboard a Flying Device |
CN109725996A (en) * | 2018-06-15 | 2019-05-07 | 中国平安人寿保险股份有限公司 | Mission mode selection and task executing method, device, equipment and storage medium |
CN110210784A (en) * | 2019-06-13 | 2019-09-06 | 青岛民航凯亚系统集成有限公司 | A kind of people's vehicle scheduling system |
US10569899B2 (en) | 2017-10-20 | 2020-02-25 | Thales | Method for controlling the restitution of alert(s) and/or system(s) reconfiguration procedure(s), related computer program product and control system |
CN112068580A (en) * | 2020-09-10 | 2020-12-11 | 北京理工大学 | Method for rapidly detecting action set with logic conditions not meeting requirements in spacecraft planning sequence |
CN112596890A (en) * | 2021-01-08 | 2021-04-02 | 中国商用飞机有限责任公司北京民用飞机技术研究中心 | Flight program operation logic structuring method and system |
US11093879B2 (en) * | 2018-07-11 | 2021-08-17 | Dassault Aviation | Task management system of an aircraft crew during a mission and related method |
Families Citing this family (7)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US9063800B2 (en) * | 2010-05-26 | 2015-06-23 | Honeywell International Inc. | Automated method for decoupling avionics application software in an IMA system |
GB2492328A (en) | 2011-06-24 | 2013-01-02 | Ge Aviat Systems Ltd | Updating troubleshooting procedures for aircraft maintenance |
FR3001065B1 (en) | 2013-01-11 | 2015-02-27 | Airbus Operations Sas | CENTRALIZED DEVICE FOR THE AUTOMATIC MANAGEMENT OF THE CONFIGURATION AND RECONFIGURATION OF MULTIPLE SYSTEMS OF AN AIRCRAFT. |
FR3013880B1 (en) * | 2013-11-26 | 2017-03-31 | Airbus Operations Sas | AVIONIC SYSTEM, IN PARTICULAR AN AIRCRAFT FLIGHT MANAGEMENT SYSTEM |
US9772712B2 (en) | 2014-03-11 | 2017-09-26 | Textron Innovations, Inc. | Touch screen instrument panel |
US20170233104A1 (en) * | 2016-02-12 | 2017-08-17 | Ge Aviation Systems Llc | Real Time Non-Onboard Diagnostics of Aircraft Failures |
GB2551517B (en) * | 2016-06-20 | 2020-06-03 | Jaguar Land Rover Ltd | Software interlock |
Citations (4)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US6021262A (en) * | 1996-07-12 | 2000-02-01 | Microsoft Corporation | System and method for detection of, notification of, and automated repair of problem conditions in a messaging system |
US20050216504A1 (en) * | 2004-03-16 | 2005-09-29 | Julien Delvat | Methods, computer program products and data processing systems for displaying a plurality of data objects |
US20050233739A1 (en) * | 2004-04-20 | 2005-10-20 | Forbes Ben C | Status reporting system and method |
US20060238511A1 (en) * | 2000-10-06 | 2006-10-26 | Gyde Mike G | Multifunction keyboard for advanced cursor driven avionic flight decks |
Family Cites Families (4)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US5442730A (en) * | 1993-10-08 | 1995-08-15 | International Business Machines Corporation | Adaptive job scheduling using neural network priority functions |
EP0838757B1 (en) * | 1996-10-25 | 2003-09-10 | Fujitsu Services Limited | Process scheduler |
US7996814B1 (en) * | 2004-12-21 | 2011-08-09 | Zenprise, Inc. | Application model for automated management of software application deployments |
FR2915292B1 (en) * | 2007-04-19 | 2009-07-03 | Airbus France Sas | METHOD AND SYSTEM FOR MODIFYING A CONTENT OF AN ALERT MESSAGE ON BOARD AN AIRCRAFT. |
-
2008
- 2008-09-05 FR FR0804879A patent/FR2935818B1/en active Active
-
2009
- 2009-09-03 US US12/553,289 patent/US8659447B2/en active Active
-
2014
- 2014-02-24 US US14/187,955 patent/US20140359564A1/en not_active Abandoned
Patent Citations (4)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US6021262A (en) * | 1996-07-12 | 2000-02-01 | Microsoft Corporation | System and method for detection of, notification of, and automated repair of problem conditions in a messaging system |
US20060238511A1 (en) * | 2000-10-06 | 2006-10-26 | Gyde Mike G | Multifunction keyboard for advanced cursor driven avionic flight decks |
US20050216504A1 (en) * | 2004-03-16 | 2005-09-29 | Julien Delvat | Methods, computer program products and data processing systems for displaying a plurality of data objects |
US20050233739A1 (en) * | 2004-04-20 | 2005-10-20 | Forbes Ben C | Status reporting system and method |
Cited By (24)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20100218114A1 (en) * | 2007-08-31 | 2010-08-26 | Thales | Method for Simplifying the Display of Stationary Members of an Onboard Database |
US8984416B2 (en) | 2007-08-31 | 2015-03-17 | Thales | Method for simplifying the display of stationary members of an onboard database |
US20110063136A1 (en) * | 2009-09-16 | 2011-03-17 | Airbus Operations (S.A.S.) | Method and device for centralized management of warnings in an aircraft comprising several warning presentation interfaces |
US8525701B2 (en) * | 2009-09-16 | 2013-09-03 | Airbus Operations S.A.S. | Method and device for centralized management of warnings in an aircraft comprising several warning presentation interfaces |
US8700232B2 (en) * | 2009-12-30 | 2014-04-15 | Thales | Method and device for centralized management of tasks to be carried out by a crew of an aircraft during flight |
US20110160938A1 (en) * | 2009-12-30 | 2011-06-30 | Thales | Device for centralized management of tasks to be carried out by a crew of an aircraft |
US20110160937A1 (en) * | 2009-12-30 | 2011-06-30 | Thales | Method and device for centralized management of tasks to be carried out by a crew of an aircraft during flight |
US9170858B2 (en) * | 2011-06-10 | 2015-10-27 | Thales | Optimized task processing method and device for an FWS |
US20120316705A1 (en) * | 2011-06-10 | 2012-12-13 | Thales | Optimized task processing method and device for an fws |
US8698653B2 (en) * | 2012-02-17 | 2014-04-15 | Honeywell International Inc. | Display system and method for generating a display |
US20130214941A1 (en) * | 2012-02-17 | 2013-08-22 | Honeywell International Inc. | Display system and method for generating a display |
US20130282207A1 (en) * | 2012-04-24 | 2013-10-24 | Thales | Fully Parametrizable Electronic Alerts and Procedures Management System, Intended for an Aircraft |
US8948938B2 (en) * | 2012-04-24 | 2015-02-03 | Thales | Fully parametrizable electronic alerts and procedures management system, intended for an aircraft |
US20160107763A1 (en) * | 2014-10-21 | 2016-04-21 | Airbus Operations S.A.S. | Method and device for assisting the management of procedures, notably of failures of systems of an aircraft |
US9650151B2 (en) * | 2014-10-21 | 2017-05-16 | Airbus Operations S.A.S. | Method and device for assisting the management of procedures, notably of failures of systems of an aircraft |
US20190120968A1 (en) * | 2016-04-05 | 2019-04-25 | Deutsches Zentrum für Luft- und Raumfahrt e.V. | Method and Device for Detecting a Fault of a Barometric Pressure Measuring System Arranged Aboard a Flying Device |
US10921457B2 (en) * | 2016-04-05 | 2021-02-16 | Deutsches Zentrum für Luft- und Raumfahrt e.V. | Method and device for detecting a fault of a barometric pressure measuring system arranged aboard a flying device |
US10023324B2 (en) * | 2016-04-06 | 2018-07-17 | Honeywell International Inc. | Methods and apparatus for providing real-time flight safety advisory data and analytics |
US10569899B2 (en) | 2017-10-20 | 2020-02-25 | Thales | Method for controlling the restitution of alert(s) and/or system(s) reconfiguration procedure(s), related computer program product and control system |
CN109725996A (en) * | 2018-06-15 | 2019-05-07 | 中国平安人寿保险股份有限公司 | Mission mode selection and task executing method, device, equipment and storage medium |
US11093879B2 (en) * | 2018-07-11 | 2021-08-17 | Dassault Aviation | Task management system of an aircraft crew during a mission and related method |
CN110210784A (en) * | 2019-06-13 | 2019-09-06 | 青岛民航凯亚系统集成有限公司 | A kind of people's vehicle scheduling system |
CN112068580A (en) * | 2020-09-10 | 2020-12-11 | 北京理工大学 | Method for rapidly detecting action set with logic conditions not meeting requirements in spacecraft planning sequence |
CN112596890A (en) * | 2021-01-08 | 2021-04-02 | 中国商用飞机有限责任公司北京民用飞机技术研究中心 | Flight program operation logic structuring method and system |
Also Published As
Publication number | Publication date |
---|---|
FR2935818A1 (en) | 2010-03-12 |
US8659447B2 (en) | 2014-02-25 |
FR2935818B1 (en) | 2010-09-17 |
US20140359564A1 (en) | 2014-12-04 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
US8659447B2 (en) | System for scheduling tasks to control the execution of warning procedures on an aircraft | |
Prisaznuk | ARINC 653 role in integrated modular avionics (IMA) | |
EP2591419B1 (en) | Simulating and testing avionics | |
US8798811B2 (en) | Method and device for assisting in the diagnostic and in the dispatch decision of an aircraft | |
US8751512B2 (en) | Method and device for managing information in an aircraft | |
US7940195B2 (en) | Process and system for modifying the content of an alarm message onboard an aircraft | |
US11900076B2 (en) | Method and apparatus for real-time control loop application execution from a high-level description | |
US20130038525A1 (en) | Vehicular display system and a method for controlling the display system | |
US8520015B2 (en) | Method for intermixing graphics applications using display intermix server for cockpit displays | |
Belschner et al. | Automated requirements and traceability generation for a distributed avionics platform | |
Mueller et al. | AAA process: a new approach to affordable fly-by-wire systems for CS23 aircraft | |
EP1864225B1 (en) | Method and software product for managing data exchange in a high-dynamics safety-critical system | |
RU2623281C2 (en) | Fully parameterizable e-mail warnings and procedures control system designed for an aircraft | |
KR101976542B1 (en) | Method and system for controlling simulation via avionics simulation model | |
Belschner et al. | Automated generation of certification relevant documentation for a distributed avionics platform approach | |
Darwesh et al. | A demonstrator for the verification of the selective integration of the Flexible Platform approach into Integrated Modular Avionics | |
US9015653B2 (en) | Aeronautical software application development workbench comprising a structured functional description language | |
Stafford et al. | Assurance for Integrating Advanced Algorithms in Autonomous Safety-Critical Systems | |
Jafer et al. | Advances in Software Engineering and Aeronautics | |
Jarrar et al. | Towards sophisticated air traffic control system using formal methods | |
Silin et al. | Development of the Perspective Aircraft Cockpit Indication System Simulator | |
Atherton et al. | 9.2. 1 developing product lines in engine control systems: Systems engineering challenges | |
Fontoura | Design automation for avionic reconfiguration schemes and schedulability analysis | |
Knoll | Risk management in fly-by-wire systems | |
Jarrar et al. | Research Article Towards Sophisticated Air Traffic Control System Using Formal Methods |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
AS | Assignment |
Owner name: THALES,FRANCE Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNORS:FRANCOIS, GILLES;GUILLEY, FABIEN;MARTY, NICOLAS;AND OTHERS;REEL/FRAME:023598/0575 Effective date: 20091106 Owner name: THALES, FRANCE Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNORS:FRANCOIS, GILLES;GUILLEY, FABIEN;MARTY, NICOLAS;AND OTHERS;REEL/FRAME:023598/0575 Effective date: 20091106 |
|
STCF | Information on status: patent grant |
Free format text: PATENTED CASE |
|
CC | Certificate of correction | ||
FPAY | Fee payment |
Year of fee payment: 4 |
|
MAFP | Maintenance fee payment |
Free format text: PAYMENT OF MAINTENANCE FEE, 8TH YEAR, LARGE ENTITY (ORIGINAL EVENT CODE: M1552); ENTITY STATUS OF PATENT OWNER: LARGE ENTITY Year of fee payment: 8 |